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DETAILED ACTION 



1. Claims 1-34 are presented for examination. 

2. The information disclosure statement (IDS) submitted on 04/19/2005 
was filed after the mailing date of the office action on 01/19/2005. The 
submission is in compliance with the provisions of 37 CFR 1.97. Accordingly, 
the information disclosure statement is being considered by the examiner. 



Claim Rejections - 35 USC §102 



3. The following is a quotation of the appropriate paragraphs of 35 

U.S.C. 102 that form the basis for the rejections under this section made in 

this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by 
another filed in the United States before the invention thereof by the applicant for patent, 
or on an international application by another who has fulfilled the requirements of 
paragraphs (1), (2), and (4) of section 371(c) of this title before the invention thereof by 
the applicant for patent. 



4. Claims 1-34 are rejected under 35 U.S.C. 102(e) as being anticipated 
by Safadi et al. (6,810,525) (hereinafter Safadi). 
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5. As per claim 1, Safadi discloses a method for providing access to 
computer resources on a computer system, comprising: 

generating a token containing encrypted user information including 
credit, authorization, and authentication information (credit entitlement, col 
2, lines 1-18); 

initiating a request to open a computer resource stored on the 
computer system, the computer resource being encrypted (col 2, lines 1- 
18); 

initiating execution of a remote application manager component on the 
computer system (server for authentication, col 2, lines 47-55); 

under control of the remote application manager (server for 
authentication, col 2, lines 47-55) component, decrypting the token and 
authenticating a user (col 2, lines 47-55) of the computer system using 
authentication information stored in the token (encrypted entitlement token, 
col 2, lines 47-55); 

verifying whether the user is authorized to use the requested 
computer resource using authorization information stored in the token 
(subscriber's private key, col 2, lines 47-55); 

verifying whether the user has sufficient credit contained (server for 
authentication, col 2, lines 47-55 and col 3, lines 10-17) in the token to use 
the requested computer resource using credit information stored in the 
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token (entitled token may be generated, col 2, lines 48-63 and col 3, lines 
10-17); 

when the user is authenticated, authorized, and has sufficient credit 
(col 3, lines 10-17), decrypting and opening the requested computer 
resource (col 5, lines 13-27); 

monitoring the usage of the opened computer resource to determine 
whether the user has sufficient credit to continue using the computer 
resource (access controller, col 6, lines 23-38); and 
providing a notification when the monitored usage of the opened computer 
resource has exceeded the credit (credit entitlement and control of the 
purchasable service, col 5, lines 42-65). 

6. As per claim 2, Safadi discloses generating a token comprises 
collecting authentication, authorization, and credit information from the user 
and storing the information in respective fields in a binary file, and 
thereafter encrypting the binary file to generate the token (Data Encryption 
Standards, col 2, lines 48-63). 

7. As per claim 3, Safadi discloses the token is stored on a smart card 
that the remote application module component accesses to retrieve and 
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decrypt the token (subscriber terminal, col 2, lines 7-10). 

8. As per claim 4, Safadi discloses initiating a request to open a computer 
resource comprises clicking on an application icon (code/data object, 16, fig 
1, col 3, lines 36-40 and col 2, lines 48-52). 

9. As per claim 5, Safadi discloses initiating execution of a remote 
application manager component occurs in response to initiating a request to 
open a computer resource (server for authentication, col 2, lines 48-52). 

10. As per claim 6, Safadi discloses the token and the computer resource 
have been encrypted using the public key encryption methodology (col 2, 
lines 53-55). 

11. As per claim 7, Safadi discloses wherein the computer resource 
comprises an application module (col 3, lines 55-67). 

12. As per claim 8, Safadi discloses the application module comprises an 
entire executable application program that is stored in encrypted form on 
the computer system (secure processor, col 3, lines 44-49). 
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13. As per claim 9, Safadi discloses monitoring the usage of the opened 
computer resource comprises monitoring how long the user has been using 
the computer resource (col 6, lines 60-65). 

14. As per claim 10, Safadi discloses providing a notification when the 
monitored usage of the opened computer resource has exceeded the credit 
comprises displaying a visual message to the user instructing the user to 
save his work and indicating his credit has been depleted (absolute visibility, 
col 6, lines 60-65). 

15. As per claim 11, the claim is rejected for the same reasons as claim 1, 
above. 

16. As per claim 12, the claim is rejected for the same reasons as claim 3, 
above. 

17. As per claim 13, the claim is rejected for the same reasons as claim 4, 
above. 
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18. As per claim 14, the claim is rejected for the same reasons as claim 6, 
above. 

19. As per claim 15, the claim is rejected for the same reasons as claim 7, 
above. 

20. As per claim 16, the claim is rejected for the same reasons as claim 8, 
above. 

21. As per claim 17, the claim is rejected for the same reasons as claim 9, 
above. 

22. As per claim 18, the claim is rejected for the same reasons as claim 
10, above. 

23. As per claim 19, the claim is rejected for the same reasons as claim 1, 
above. 

24. As per claim 20, the claim is rejected for the same reasons as claim 2, 
above. 



Application/Control Number: 09/923,663 
Art Unit: 2154 



Page 8 



25. As per claim 21, the claim is rejected for the same reasons as claim 4, 
above. 

26. As per claim 22, the claim is rejected for the same reasons as claim 6, 
above. 

27. As per claim 23, the claim is rejected for the same reasons as claim 7, 
above. 

28. As per claim 24, the claim is rejected for the same reasons as claim 8, 
above. 

29. As per claim 25, the claim is rejected for the same reasons as claim 9, 
above. 

30. As per claim 26, the claim is rejected for the same reasons as claim 
10, above. 

31. As per claim 27, the claim is rejected for the same reasons as claim 1, 
above. 
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32. As per claim 28, Safadi discloses the request to initiate execution of a 
selected one of the computer resources comprises a request to initiate 
execution of a computer resource component not found on the client system, 
and the remote application manager component is further operable to 
contact a server system responsive to this request to initiate transfer of the 
selected computer resource component to the client system along with an 
updated token component including updated authorization information for 
the computer resource component (conditional access, col 4, lines 27-45). 

33. As per claim 29, Safadi discloses the remote application manager is 
further operable to contact a server system when the credit contained in the 
token component is insufficient to initially open or to continue executing the 
selected computer resource component to initiate transfer of an updated 
token component including updated credit information to the client system 
(col 4, lines 27-45 and col 5, lines 1-27). 

34. As per claim 30, Safadi discloses the token component comprises a 
smart card on which the token is stored and a card reader that is adapted to 
read the token stored on the smart card and supply the read token to the 
remote application manager component (secure processor, col 6, lines 42- 
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60). 

35. As per claim 31, Safadi discloses the claim is rejected for the same 
reasons as claim 1, above. In addition, Safadi discloses an accounting and 
billing component that is operable to receive user credit information and to 
verify user credit based upon such received information (col 5, lines 13-20), 
the accounting and billing component providing a credit approval output 
indicating the results of the credit verification (col 3, lines 57-67); 

and a client interface component that is operable to receive client 
requests from client computers and to provide credit information contained 
in such requests to the accounting and billing component (col 5, lines 55- 
67), and when the credit approval output indicates the user's credit has been 
approved the client interface component providing credit and user 
information to the token generation component and receiving the generated 
token from the token generation component (col 6, lines 7-11), the client 
interface component further operable to select computer resources using 
information contained in the client requests and to encrypt each selected 
computer resource (col 6, lines 7-11), the client interface module 
transferring the token and the encrypted selected computer resources to the 
client computer along with a remote application manager component (col 6, 
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lines 1-24). 

36. As per claim 32, Safadi discloses the computer resource component 
includes a plurality of application programs (col 3, lines 55-67). 

37. As per claim 33, Safadi discloses each of the application programs 
includes all necessary system files for execution (col 3, lines 55-67 and col 
6, lines 1-7). 

38. As per claim 34, Safadi discloses the client interface component is 
adapted to receive HTTP requests from client computers and each client 
request is received as one or more such HTTP requests (internet, col 5, lines 
43-48). 

Response to Arguments 

39. Applicant's arguments filed 04/21/2005 have been fully considered but 
they are not persuasive, therefore rejections to claims 1-34 is maintained. 
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40. In the remarks applicants argued that: 

Argument: Safadi does not disclose initiating a request to open a computer 
resource stored on the computer system. 

Response: Safadi discloses initiating a request to open a computer resource 
stored on the computer system (entitlement token is generated, col 2, lines 
1-18, col 3, lines 50-55, components resident in the subscriber terminal). 

Argument: Safadi does not disclose providing a notification when the 
monitored usage of the opened computer resource has exceeded the credit. 
Response: Safadi discloses providing a notification when the monitored 
usage of the opened computer resource has exceeded the credit (billing 
system via a web browser running on subscriber terminal anticipates credit 
entitlement and control of the purchasable service, col 2, lines 30-41;col 5, 
lines 42-65; col 3, lines 10-20, protection against repudiation). 

Argument: Safadi does not disclose under control of the remote application 
manager component, decrypting the token and authenticating a user of the 
computer system using authentication information stored in the token. 
Response: Safadi discloses under control of the remote application manager 
(server for authentication, col 2, lines 47-55) component, decrypting (col 2, 
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lines 55-64 DES standard) the token and authenticating a user (col 2, lines 
47-55) of the computer system using authentication information stored in 
the token (encrypted entitlement token, col 2, lines 1-18; lines 47-55); 

Argument: Safadi does not disclose providing a notification when the 
monitored usage of the opened computer resource has exceeded the credit 
comprises displaying a visual message to the user instructing the user to 
save his work and indicating his credit has been depleted. 
Response: Safadi discloses providing a notification when the monitored 
usage of the opened computer resource has exceeded the credit comprises 
displaying a visual message to the user instructing the user to save his work 
and indicating his credit has been depleted (absolute visibility, col 6, lines 
60-65; col 2, lines 30-41;col 5, lines 42-65; col 3, lines 10-20, billing system 
via a web browser running on subscriber terminal anticipates credit 
entitlement and control of the purchasable service, protection against 
repudiation). 

Conclusion 



41. THIS ACTION IS MADE FINAL. Applicant is reminded of the 
extension of time policy as set forth in 37 CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to 
expire THREE MONTHS from the mailing date of this action. In the event a 
first reply is filed within TWO MONTHS of the mailing date of this final action 
and the advisory action is not mailed until after the end of the THREE- 
MONTH shortened statutory period, then the shortened statutory period will 
expire on the date the advisory action is mailed, and any extension fee 
pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply 
expire later than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Mohammad A. Siddiqi whose 
telephone number is (571) 272-3976. the examiner can normally be 
reached on Monday -Thursday. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, John A. Follansbee can be reached on (571) 272- 
3964. The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained 
from the Patent Application Information Retrieval (PAIR) system. Status 
information for published applications may be obtained from either Private 
PAIR or Public PAIR. Status information for unpublished applications is 
available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic Business Center 
(EBC) at 866-217-9197 (toll-free). 
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